kihei/i-0583765cb8fe8fe00
by SadServersMore by SadServers
total 44 drwxr-xr-x 6 admin admin 4096 Sep 24 2023 . drwxr-xr-x 3 root root 4096 Sep 17 2023 .. drwx------ 3 admin admin 4096 Sep 20 2023 .ansible -rw------- 1 admin admin 379 Nov 4 03:55 .bash_history -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4096 Sep 20 2023 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 2023 .ssh drwxr-xr-x 2 admin root 4096 Sep 24 2023 agent -rwxrwx--- 1 root root 360 Sep 24 2023 webserver.py admin@i-0462cf041b08d8861:~$ chown -R admin:admin /home/admin/ chown: changing ownership of '/home/admin/webserver.py': Operation not permittedadmin@i-0462cf041b08d8861:~$ curl http
paris/i-0462cf041b08d8861 04:12
by SadServerstotal 12 -rwxrwx--- 1 root root 360 Sep 24 2023 webserver.py drwxr-xr-x 2 admin root 4096 Sep 24 2023 agent -rw-r--r-- 1 admin admin 79 Mar 2 05:22 py-wrapper.sh admin@i-02f98745e2b363f17:~$ losetup admin@i-02f98745e2b363f17:~$ losetup -l admin@i-02f98745e2b363f17:~$ ls -ltr total 12 -rwxrwx--- 1 root root 360 Sep 24 2023 webserver.py drwxr-xr-x 2 admin root 4096 Sep 24 2023 agent -rw-r--r-- 1 admin admin 79 Mar 2 05:22 py-wrapper.sh admin@i-02f98745e2b363f17:~$ mkdir /tmp/test admin@i-02f98745e2b363f17:~$ mount -o bind,ro /home/admin /tmp/test mount: /tmp/test: must be superuser to use mount. admin@i-02f98745e2b363f17:~$
paris/i-02f98745e2b363f17 06:38
by SadServers> GET / HTTP/1.1 > Host: localhost:5000 > User-Agent: curl/7.74.0 > Accept: */* > * Mark bundle as not supporting multiuse < HTTP/1.1 200 OK < Server: Werkzeug/2.3.7 Python/3.9.2 < Date: Wed, 29 Jan 2025 13:43:21 GMT < Content-Type: text/html; charset=utf-8 < Content-Length: 12 < Connection: close < * Closing connection 0 Unauthorizedadmin@i-0c965baba3280997a:/etc/apache2/conf-available$ ls -la /etc/h
paris/i-0c965baba3280997a 02:33
by SadServers[sudo] password for admin: Sorry, try again. [sudo] password for admin: sudo: 1 incorrect password attempt admin@i-0b5ae01707d129981:~$ ^Cdo cat webserver.py admin@i-0b5ae01707d129981:~$ ^C admin@i-0b5ae01707d129981:~$ ls -la webserver.py -rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py admin@i-0b5ae01707d129981:~$ ps aux | webserver bash: webserver: command not found admin@i-0b5ae01707d129981:~$ ps aux |grep webserver root 574 0.1 6.0 107132 28344 ? Ss 18:05 0:00 /usr/bin/pyth.py admin 804 0.0 0.1 5264 704 pts/1 S<+ 18:08 0:00 grep webserveadmin@i-0b5ae01707d129981:~$ systemctl st